Linux 7.2 removes strncpy function after six years

Linux 7.2 has completed the removal of the strncpy function from the kernel. The change ended a long-running cleanup effort involving more than 360 patches.

The merge window for Linux 7.2 closed on Friday with the final removal of strncpy from every subsystem. Kernel developers had worked on the project for six years.

The function is described in the kernel's own documentation as actively dangerous. Its elimination marks the end of a campaign that many had stopped expecting to finish.

The update affects all remaining uses of the C string-copy routine across drivers and other components.

Articoli correlati

Illustration depicting the Linux CopyFail vulnerability enabling root access exploits alongside Ubuntu's DDoS-induced outage.
Immagine generata dall'IA

Linux CopyFail exploit threatens root access amid Ubuntu outage

Riportato dall'IA Immagine generata dall'IA

A critical Linux vulnerability known as CopyFail, tracked as CVE-2026-31431, allows attackers to gain root access on systems running kernels since 2017. Publicly released exploit code has heightened risks for data centers and personal devices. Ubuntu's infrastructure has been offline for over a day due to a DDoS attack, hampering security communications.

NVIDIA engineer Sasha Levin has proposed a new mechanism for the Linux kernel that would let administrators quickly disable flawed functions on live systems. The patch, called killswitch, aims to mitigate privilege escalation risks without waiting for full fixes. It remains under review on the Linux Kernel Mailing List.

Riportato dall'IA

Four days after the CopyFail (CVE-2026-31431) exploit disclosure disrupted Ubuntu services, the US government warned of its critical risks to Linux systems, urging immediate patching amid public exploit code.

Questo sito web utilizza i cookie

Utilizziamo i cookie per l'analisi per migliorare il nostro sito. Leggi la nostra politica sulla privacy per ulteriori informazioni.
Rifiuta